CVE-2023-28412

概要

参考情報

• cisa.gov/news-events/ics-advisories/icsa-23-136-01 · Third Party Advisory
• control4.com/docs/product/ovrc-software/release-notes/english/latest/ovrc-software-release-notes-rev-r.pdf · Release Notes

orvc のその他の脆弱性

• CVE-2023-25183高 7.2 In Snap One OvrC Pro versions prior to 7.2, when logged into the superuser account, a new functionality app…
• CVE-2023-31245中 6.1 Devices using Snap One OvrC cloud are sent to a web address when accessing a web management interface using a HTTP …
• CVE-2023-31241緊急 10.0Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright.
• CVE-2023-31240緊急 9.8Snap One OvrC Pro versions prior to 7.2 have their own locally running web server accessible both from the local network and remotely. OvrC …
• CVE-2023-31193高 7.5 Snap One OvrC Pro versions prior to 7.3 use HTTP connections when downloading a program from their servers. Because they do not…